Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
File:                     lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json)
Hash identifier:          7FFmBZkQo92Zht/rsN6UHcK0AGQA/5xOtGcwsXiXeGM=
Subject key identifier:   F8:6A:F5:FB:CF:ED:C0:61:46:A9:9C:5C:56:6F:71:4F:FC:92:34:FD
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Certificate issuer:       /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial:       01A0CC35F2A3607B403697DAD2CE26557505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:01:22 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:22 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:22 +0000
Files and hashes:         1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=)
                          2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=)
                          3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=)
                          4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=)
                          5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=)
                          6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=)
                          7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=)
                          8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=)
                          9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=)
                          10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=)
                          11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=)
                          12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=)
                          13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=)
                          14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=)
                          15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=)
                          16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: jjVDO3FQIX7jq5VZRnnP2++DnDsLrjkY3LMF7300mmg=)
                          17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=)
                          18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=)
                          19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=)
                          20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=)
                          21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=)
                          22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=)
                          23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:f2:a3:60:7b:40:36:97:da:d2:ce:26:55:75:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
        Validity
            Not Before: Sep 23 03:01:22 2026 GMT
            Not After : Sep 24 03:01:22 2026 GMT
        Subject: CN=f86af5fbcfedc06146a99c5c566f714ffc9234fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:dd:61:ab:6d:50:46:67:e8:4f:16:2d:f0:
                    b8:04:24:9b:52:38:01:26:b4:74:24:c2:2f:bd:7e:
                    57:94:8f:7c:61:18:cc:2a:5c:e9:c4:52:e8:a2:49:
                    77:44:05:05:a4:f1:64:b1:c7:5e:87:9c:3f:dd:0e:
                    71:24:a0:3f:cb:c5:b6:c4:4c:a4:f8:ee:1a:4a:b1:
                    96:9c:00:cd:69:97:bd:37:73:20:aa:bc:32:c5:67:
                    61:24:6f:36:ba:e8:98:c8:9f:7a:82:31:a7:cf:25:
                    b2:64:18:08:27:7f:a6:0a:f5:ef:2d:3b:94:26:35:
                    3c:10:80:53:66:bd:cb:56:75:1e:58:a6:15:ba:40:
                    bd:79:32:99:a7:a5:c0:c0:65:a7:18:9d:5a:ab:16:
                    2b:fb:b9:5c:ef:c8:9e:11:de:31:20:3d:80:6a:22:
                    fa:be:08:b5:1e:14:dd:cb:4a:8b:f4:8a:1a:00:6c:
                    9e:25:f8:9d:e8:98:52:ea:12:40:50:5a:f8:d9:b0:
                    ca:1b:2f:2e:35:69:1f:8d:97:d3:09:8e:f2:9e:83:
                    bd:99:df:15:b0:02:b6:93:d6:88:af:53:e9:a6:e7:
                    ea:74:8b:ef:09:b4:f2:a5:95:e8:74:e6:f9:c3:31:
                    bd:36:be:a0:b7:f0:11:63:ad:56:23:f7:ad:58:d2:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6A:F5:FB:CF:ED:C0:61:46:A9:9C:5C:56:6F:71:4F:FC:92:34:FD
            X509v3 Authority Key Identifier:
                keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6e:f2:18:20:7f:35:5c:eb:55:3a:7e:cf:1f:bf:9c:57:db:
         40:d9:05:f2:e4:1d:95:6d:8b:6a:b1:33:48:25:1a:55:c6:a0:
         2f:51:ba:a2:24:ab:40:81:69:2b:a4:e2:8f:2b:1b:5e:d9:a6:
         5d:da:31:4b:89:fc:bb:47:07:26:e3:c4:ab:3d:c0:1b:23:55:
         ae:0f:8e:e2:c2:e2:1a:80:b5:e8:bb:4c:82:93:34:13:b0:d5:
         c9:b9:ff:33:a9:ac:f5:92:89:c1:03:87:b1:4b:04:bd:3b:3f:
         b1:8d:f8:ba:19:e3:f8:8b:29:75:7c:eb:c0:52:02:48:1c:21:
         6d:2a:37:df:a5:ed:d5:bd:8a:e7:bc:f2:7d:ac:92:aa:9a:d0:
         f9:e1:0a:20:f3:20:b6:0a:1e:74:4d:19:56:2c:13:01:15:16:
         73:72:bb:22:a1:72:67:d3:77:5c:6a:0c:d0:28:6f:78:08:ab:
         8b:d8:8d:37:3a:60:48:d5:0b:00:44:32:ae:9b:e8:32:f2:97:
         a9:2f:ff:f9:6b:18:dd:c1:3f:f7:ab:93:0b:a5:b6:c3:06:a1:
         bf:d8:91:eb:29:51:a8:eb:93:e0:dc:9f:9c:85:49:49:48:9a:
         e1:ee:98:62:e0:6c:e2:c7:c0:da:7a:8c:64:7e:2d:33:8f:14:
         24:c8:84:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNfKjYHtANpfa0s4mVXUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0
MTc0ODAwHhcNMjYwOTIzMDMwMTIyWhcNMjYwOTI0MDMwMTIyWjAzMTEwLwYDVQQD
EyhmODZhZjVmYmNmZWRjMDYxNDZhOTljNWM1NjZmNzE0ZmZjOTIzNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsDdYattUEZn6E8WLfC4BCSbUjgB
JrR0JMIvvX5XlI98YRjMKlzpxFLookl3RAUFpPFkscdeh5w/3Q5xJKA/y8W2xEyk
+O4aSrGWnADNaZe9N3MgqrwyxWdhJG82uuiYyJ96gjGnzyWyZBgIJ3+mCvXvLTuU
JjU8EIBTZr3LVnUeWKYVukC9eTKZp6XAwGWnGJ1aqxYr+7lc78ieEd4xID2AaiL6
vgi1HhTdy0qL9IoaAGyeJfid6JhS6hJAUFr42bDKGy8uNWkfjZfTCY7ynoO9md8V
sAK2k9aIr1PppufqdIvvCbTypZXodOb5wzG9Nr6gt/ARY61WI/etWNIwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhq9fvP7cBhRqmcXFZvcU/8kjT9MB8GA1UdIwQY
MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV27yGCB/
NVzrVTp+zx+/nFfbQNkF8uQdlW2LarEzSCUaVcagL1G6oiSrQIFpK6TijysbXtmm
XdoxS4n8u0cHJuPEqz3AGyNVrg+O4sLiGoC16LtMgpM0E7DVybn/M6ms9ZKJwQOH
sUsEvTs/sY34uhnj+IspdXzrwFICSBwhbSo336Xt1b2K57zyfaySqprQ+eEKIPMg
tgoedE0ZViwTARUWc3K7IqFyZ9N3XGoM0ChveAiri9iNNzpgSNULAEQyrpvoMvKX
qS//+WsY3cE/96uTC6W2wwahv9iR6ylRqOuT4NyfnIVJSUia4e6YYuBs4sfA2nqM
ZH4tM48UJMiEuQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:28:14 2026 by rpki-client